$ rpki-client -vvf rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft File: at5OHE4cCb8U36pMPWAPQY4X5y4.mft (raw, json) Hash identifier: KIIznMajUOG6pA3ScSsX3wPduso6+NNQGg8qHZJVqQM= Subject key identifier: FA:B3:21:E9:48:C5:FD:5C:EF:47:3F:67:A5:FB:CF:70:BC:E1:41:6A Authority key identifier: 6A:DE:4E:1C:4E:1C:09:BF:14:DF:AA:4C:3D:60:0F:41:8E:17:E7:2E Certificate issuer: /CN=A918429B/serialNumber=6ADE4E1C4E1C09BF14DFAA4C3D600F418E17E72E Certificate serial: 34B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at5OHE4cCb8U36pMPWAPQY4X5y4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft Manifest number: 34B0 Signing time: Fri 22 Aug 2025 14:53:27 +0000 Manifest this update: Fri 22 Aug 2025 14:53:27 +0000 Manifest next update: Fri 29 Aug 2025 14:53:27 +0000 Files and hashes: 1: at5OHE4cCb8U36pMPWAPQY4X5y4.crl (hash: //2eDqcYQ9ls3wE25DISJwY3IILeprHpTshcVNllDjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.crl rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at5OHE4cCb8U36pMPWAPQY4X5y4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:53:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13488 (0x34b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918429B, serialNumber=6ADE4E1C4E1C09BF14DFAA4C3D600F418E17E72E Validity Not Before: Aug 22 14:53:27 2025 GMT Not After : Aug 29 14:53:27 2025 GMT Subject: CN=68a88467-edb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fa:fb:26:bc:22:6c:3f:c1:3d:58:25:78:e5: 7b:49:5f:20:90:a5:8d:81:ac:3e:7c:93:e4:b0:63: a5:8d:12:c9:cb:29:35:5a:cd:9e:3b:5f:cc:9b:d3: e5:63:e9:5a:44:0f:c2:4d:9c:3f:e1:87:cc:cf:b9: dd:01:40:97:d6:2b:a2:b0:b3:42:a4:7e:85:27:e5: 9b:17:0c:f3:8e:2e:dc:a7:91:bd:fc:4f:49:1a:ca: 68:4a:43:8f:e6:c1:58:31:87:4f:25:a7:59:f0:2e: 86:27:b8:cf:54:92:28:51:f9:cb:91:2d:de:e0:eb: d0:45:ee:3b:a4:44:0b:92:02:a9:a2:5c:e1:b5:38: 41:34:c9:13:11:c6:9c:63:6a:96:42:3a:bd:b8:dd: f0:91:0a:60:87:13:1c:21:5b:1f:e6:0d:da:34:ad: fb:55:e2:52:1e:7a:f8:35:de:d1:89:75:1e:7e:f5: 8f:ac:2c:d5:9a:77:d6:e5:2b:e8:36:37:78:63:2c: 56:45:81:ca:f5:4e:e7:2b:9d:08:8f:bb:bb:0f:20: b4:2c:e9:61:eb:9f:15:18:94:7a:5c:19:ab:85:46: ae:ef:42:ca:80:1b:6b:35:0d:1e:de:69:91:00:bc: 7e:f2:21:9c:ba:53:0d:96:ff:fc:88:fb:f2:59:da: 12:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B3:21:E9:48:C5:FD:5C:EF:47:3F:67:A5:FB:CF:70:BC:E1:41:6A X509v3 Authority Key Identifier: keyid:6A:DE:4E:1C:4E:1C:09:BF:14:DF:AA:4C:3D:60:0F:41:8E:17:E7:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at5OHE4cCb8U36pMPWAPQY4X5y4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:99:67:09:7f:e8:d6:cb:2f:19:3e:7c:59:40:a5:95:5e:87: 37:4f:b7:06:94:f9:d6:3f:b9:fb:f1:ce:f2:69:d5:03:62:38: a3:18:af:73:6f:d6:5e:5a:4c:4e:06:58:fb:dc:1d:b5:49:30: 4d:99:6d:77:c3:4f:1e:dd:30:00:68:c3:ed:38:60:5a:5a:40: 47:bc:cf:ee:b7:c6:ce:74:70:f0:0e:af:f9:68:98:82:58:58: d1:34:32:bf:6d:d7:16:3e:14:fe:b1:7f:6c:e1:22:c8:cf:28: aa:e1:7b:dc:2e:03:26:e1:17:df:a3:a7:79:38:a4:ad:c5:8f: 81:d1:84:07:db:27:6d:1d:46:61:23:f0:f5:a9:66:22:ff:87: 7d:0c:9b:7c:e9:b2:22:a4:e3:7f:4d:68:f5:f5:5e:fd:1a:14: bb:57:bf:6e:7c:44:06:f4:f3:50:d8:95:23:0e:6d:3c:bd:95: 98:74:cd:8b:90:08:2f:6d:33:08:cb:58:97:cd:c1:0f:a4:35: e8:e4:7b:fd:94:14:08:4c:29:28:26:c0:36:65:1e:30:b6:c0: 7b:29:dd:c4:de:ee:17:37:a2:61:9a:13:47:b3:f8:0b:b5:3f: 28:68:26:4d:58:8d:2b:53:82:1c:99:ce:84:d4:0e:90:31:85: fe:b9:04:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQyOUIxMTAvBgNVBAUTKDZBREU0RTFDNEUxQzA5QkYxNERGQUE0QzNENjAwRjQx OEUxN0U3MkUwHhcNMjUwODIyMTQ1MzI3WhcNMjUwODI5MTQ1MzI3WjAYMRYwFAYD VQQDEw02OGE4ODQ2Ny1lZGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5fr7JrwibD/BPVgleOV7SV8gkKWNgaw+fJPksGOljRLJyyk1Ws2eO1/Mm9Pl Y+laRA/CTZw/4YfMz7ndAUCX1iuisLNCpH6FJ+WbFwzzji7cp5G9/E9JGspoSkOP 5sFYMYdPJadZ8C6GJ7jPVJIoUfnLkS3e4OvQRe47pEQLkgKpolzhtThBNMkTEcac Y2qWQjq9uN3wkQpghxMcIVsf5g3aNK37VeJSHnr4Nd7RiXUefvWPrCzVmnfW5Svo Njd4YyxWRYHK9U7nK50Ij7u7DyC0LOlh658VGJR6XBmrhUau70LKgBtrNQ0e3mmR ALx+8iGculMNlv/8iPvyWdoSkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqzIelI xf1c70c/Z6X7z3C84UFqMB8GA1UdIwQYMBaAFGreThxOHAm/FN+qTD1gD0GOF+cu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDI5Qi9CNjAwNjNBQzFE OTcxMUUyQkEyRTQ1ODEwOEIwMkNEMi9hdDVPSEU0Y0NiOFUzNnBNUFdBUFFZNFg1 eTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F0NU9IRTRjQ2I4VTM2cE1QV0FQUVk0WDV5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDI5Qi9CNjAwNjNBQzFEOTcxMUUyQkEyRTQ1ODEwOEIwMkNEMi9hdDVPSEU0Y0Ni OFUzNnBNUFdBUFFZNFg1eTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTmWcJf+jWyy8ZPnxZQKWVXoc3T7cGlPnWP7n78c7yadUDYjijGK9z b9ZeWkxOBlj73B21STBNmW13w08e3TAAaMPtOGBaWkBHvM/ut8bOdHDwDq/5aJiC WFjRNDK/bdcWPhT+sX9s4SLIzyiq4XvcLgMm4Rffo6d5OKStxY+B0YQH2ydtHUZh I/D1qWYi/4d9DJt86bIipON/TWj19V79GhS7V79ufEQG9PNQ2JUjDm08vZWYdM2L kAgvbTMIy1iXzcEPpDXo5Hv9lBQITCkoJsA2ZR4wtsB7Kd3E3u4XN6JhmhNHs/gL tT8oaCZNWI0rU4Icmc6E1A6QMYX+uQTU -----END CERTIFICATE-----Generated at Sat Aug 23 20:58:40 2025 by rpki-client